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What is claimed is: 

1. A method of creating a network connection between an applet executing on a 
client computer and a content server computer, the method comprising: determining a 
home site name for the applet, the home site name corresponding to a host name of a 
computer from which the applet was downloaded to the client computer; checking for 
the presence of a hostname entry in a name file on the content server computer 
having an access construct, the hostname entry corresponding to the home site name 
for the applet ; permitting the applet to create a network connection with the 
content server computer if the hostname entry was present; and denying permission 
for the applet to create a network connection with the content server computer if 
the hostname' entry was not present. 

2. The method of claim 1, wherein an execution engine executes the applet on the 
client computer, and wherein checking for the presence of a hostname entry in the 
name file of the content server computer comprises using network restriction 
software in the execution engine to check for the presence of the hostname entry. 

3. The method of claim 1, wherein the access construct comprises an allow list, the 
allow list comprising the hostname entry representing a computer from which the 
applet is allowed to have been download from in order to allow the creation of the 
network connection 



4. The method of claim 3, wherein the host name entries are specified using 
wildcards . 

5. The method of claim 1, wherein the access construct comprises an except list, 
the except list comprising the hostname entry representing a computer from which 
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the applet is not allowed to have been downloaded from in order to allow the 
creation of the network connection. 

6. The method of claim 5, wherein the host name entries are specified using 
wildcards . 

7. The method of claim 1, wherein the access construct comprises a special entry to 
allow access to applets downloaded for any host computer. 

8. The method of claim 1, further comprising using the hostname entry to determine 
types of network connections that are permitted between the applet and the content 
server computer. 

9. The method of claim 1, further comprising performing an address check. 

10. The method of claim 9, wherein performing an address check comprises: 
determining an address list for the content server computer; determining an address 
list for- the computer from which the applet was downloaded; and denying permission 
for the applet to create a network connection with the content server computer if 
the address list for the content server computer is not a subset of the address 
list for the computer from which the applet was downloaded. 

11. The method of claim 9, wherein performing an address check comprises denying 
permission for the applet to create a network connection with the content server 
computer if the home site name for the applet is in dotted quad form, and an 
address specified by the dotted quad form is not identical to an address for the 
content server computer. 

12. A computer program product comprising: a computer usable medium for creating a 
network connection between an applet executing on a client computer and a content 
server computer; a set of computer program instructions embodied on the computer 
usable medium, including instructions to: determine a home site name for the 
applet, the home site name corresponding to a host name of a computer from which 
the applet was downloaded to the client computer; check for the presence of a 
hostname entry in a name file on the content server computer having an access 
construct, the hostname entry corresponding to the home site name for the applet ; 
permit the applet to create a network connection with the content server computer 
if the hostname entry was present; and deny permission for the applet to create a 
network connection with the content server computer if the hostname entry was not 
present . 

13. A computer data signal embodied in a carrier wave comprising a code segment for 
creating a network connection between an applet executing on a client computer and 
a content server computer, the code segment including instructions to: determine a 
home site name for the applet, the home site name corresponding to a host name of a 
computer from which the applet was downloaded to the client computer; check for the 
presence of a hostname entry in a name file on the content server computer having 
an access construct, the hostname entry corresponding to the home site name for the 
applet ; permit the applet to create a network connection with the content server 
computer if the hostname entry was present; and deny permission for the applet to 
create a network connection with the content server computer if the hostname entry 
was not present. 

14. A computer system for creating a network connection comprising: a client 
computer executing an applet ; a content server computer having a name file; a 
processor executing the applet on the client computer and determining a home site 
name for the applet, the home site name corresponding to a host name of a computer 
from which the applet was downloaded to the client computer, checking for the 
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presence of a hostname entry in the name file on the content server computer having 
an access construct, the hostname entry corresponding to the home site name for the 
applet, permitting the applet to create a network connection with the content 
server computer if the hostname entry was present, and denying permission for the 
applet to create a network connection with the content server computer if the 
hostname entry was not present. 

15. A computer system for creating a network connection between an applet executing 
on a client computer and a content server computer, comprising: a means for 
determining a home site name for the applet, the home site name corresponding to a 
host name of a computer from which the applet was downloaded to the client 
computer; a means for checking for the presence of a hostname entry in a name file 
on the content server computer having an access construct, the hostname entry 
corresponding to the home site name for the applet ; a means for permitting the . 
applet to create a network connection with the content server computer if the 
hostname entry was present; and a means for denying permission for the applet to 
create a network connection with the content server computer if the hostname entry 
was not present. 
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